Weekly Permissions sync 2026-03-19

Author: marabooy

permissions/new/permissions.json

@@ -13675,7 +13675,7 @@
           "adminDisplayName": "Manage all delegated permission grants",
           "adminDescription": "Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), without a signed-in user.",
           "requiresAdminConsent": true,
-          "privilegeLevel": 4
+          "privilegeLevel": 5
         }
       },
       "pathSets": [
@@ -13688,8 +13688,8 @@
             "GET"
           ],
           "paths": {
-            "/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "least=Application",
-            "/serviceprincipals(appid={value})/oauth2permissiongrants": "least=Application",
+            "/serviceprincipals(appid={value})/inheritedoauth2permissiongrants": "",
+            "/serviceprincipals(appid={value})/oauth2permissiongrants": "",
             "/serviceprincipals/{id}/inheritedoauth2permissiongrants": "",
             "/serviceprincipals/{id}/oauth2permissiongrants": "",
             "/users/{id}/oauth2permissiongrants": ""
@@ -13717,7 +13717,7 @@
             "POST"
           ],
           "paths": {
-            "/oauth2permissiongrants": "least=DelegatedWork,Application"
+            "/oauth2permissiongrants": ""
           }
         },
         {
@@ -13731,7 +13731,7 @@
             "PATCH"
           ],
           "paths": {
-            "/oauth2permissiongrants/{id}": "least=DelegatedWork,Application"
+            "/oauth2permissiongrants/{id}": ""
           }
         },
         {
@@ -26490,6 +26490,21 @@
             "/me/drive/items/{id}/permissions/{id}": ""
           }
         },
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "DELETE"
+          ],
+          "paths": {
+            "/drives/{id}/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+            "/groups/{id}/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+            "/me/drive/items/{id}/retentionLabel": "least=DelegatedWork,Application",
+            "/users/{user-id}/drive/items/{item-id}/retentionLabel": "least=DelegatedWork,Application"
+          }
+        },
         {
           "schemeKeys": [
             "DelegatedWork",
@@ -33563,6 +33578,7 @@
             "/networkaccess/discovery/discoveredApplicationSegments": "least=DelegatedWork,Application",
             "/networkaccess/logs/connections": "least=DelegatedWork,Application",
             "/networkaccess/logs/connections/{id}": "least=DelegatedWork,Application",
+            "/networkaccess/logs/generativeAIInsights": "least=DelegatedWork,Application",
             "/networkaccess/logs/remoteNetworks": "least=DelegatedWork,Application",
             "/networkaccess/logs/traffic": "least=DelegatedWork,Application",
             "/networkaccess/logs/traffic/{id}": "least=DelegatedWork,Application",
@@ -33751,6 +33767,7 @@
             "/networkAccess/forwardingProfiles/{id}/policies/{id}": "",
             "/networkaccess/logs/connections": "",
             "/networkaccess/logs/connections/{id}": "",
+            "/networkaccess/logs/generativeAIInsights": "",
             "/networkaccess/logs/remoteNetworks": "",
             "/networkaccess/logs/traffic": "",
             "/networkaccess/logs/traffic/{id}": "",
@@ -42395,6 +42412,7 @@
             "/copilot/reports/getmicrosoft365copilotusageuserdetail(period={value})": "least=DelegatedWork,Application",
             "/copilot/reports/getmicrosoft365copilotusercountsummary(period={value})": "least=DelegatedWork,Application",
             "/copilot/reports/getmicrosoft365copilotusercounttrend(period={value})": "least=DelegatedWork,Application",
+            "/reports/azureADPremiumLicenseInsight": "least=DelegatedWork,Application",
             "/reports/credentialuserregistrationdetails": "least=DelegatedWork,Application",
             "/reports/getazureadapplicationsigninsummary(period={value})": "least=DelegatedWork,Application",
             "/reports/getbrowserdistributionusercounts(period={value})": "least=DelegatedWork,Application",
@@ -46591,6 +46609,20 @@
           "paths": {
             "/sites/getOperationStatus(operationId='{id}')": ""
           }
+        },
+        {
+          "schemeKeys": [
+            "DelegatedWork"
+          ],
+          "methods": [
+            "DELETE"
+          ],
+          "paths": {
+            "/drives/{id}/items/{id}/retentionLabel": "",
+            "/groups/{id}/drive/items/{id}/retentionLabel": "",
+            "/me/drive/items/{id}/retentionLabel": "",
+            "/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
+          }
         }
       ],
       "ownerInfo": {
@@ -47902,6 +47934,21 @@
             "/users/{user-id}/drive/root:/{item-path}/media/reactions": "least=DelegatedWork,DelegatedPersonal"
           }
         },
+        {
+          "schemeKeys": [
+            "DelegatedWork",
+            "Application"
+          ],
+          "methods": [
+            "DELETE"
+          ],
+          "paths": {
+            "/drives/{id}/items/{id}/retentionLabel": "",
+            "/groups/{id}/drive/items/{id}/retentionLabel": "",
+            "/me/drive/items/{id}/retentionLabel": "",
+            "/users/{user-id}/drive/items/{item-id}/retentionLabel": ""
+          }
+        },
         {
           "schemeKeys": [
             "DelegatedWork"

permissions/new/provisioningInfo.json

@@ -503,17 +503,7 @@
         "isEnabled": false,
         "resourceAppId": "00000002-0000-0000-c000-000000000000"
       }
-    ],
-    "AgentIdentityBlueprintPrincipal.CreateAsManager": [
-      {
-        "id": "c50c596a-6889-4460-acb1-3ed7c5fc142a",
-        "scheme": "Application",
-        "environment": "PPE;public",
-        "isHidden": true,
-        "isEnabled": false,
-        "resourceAppId": "00000002-0000-0000-c000-000000000000"
-      }
-    ],
+    ],    
     "AgentIdentityBlueprintPrincipal.Read.All": [
       {
         "id": "",
@@ -4404,6 +4394,24 @@
         "resourceAppId": ""
       }
     ],
+    "DelegatedPermissionGrant.ReadWrite.ManagedBy": [
+      {
+        "id": "8b7aa0f1-33fa-4590-b40d-c4fc375948b5",
+        "scheme": "DelegatedWork",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      },
+      {
+        "id": "87e86d7b-d7db-424e-be87-d7be784cf70d",
+        "scheme": "Application",
+        "environment": "public",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      }
+    ],
     "CallAiInsights.Read.All": [
       {
         "id": "e24bdaf9-83f8-468b-a144-c681ccb6caf4",
@@ -17311,6 +17319,24 @@
         "resourceAppId": "66244124-575c-4284-92bc-fdd00e669cea"
       }
     ],
+    "User.Create": [
+      {
+        "id": "e0fc39a6-9789-4d47-8577-c63811c29715",
+        "scheme": "DelegatedWork",
+        "environment": "",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      },
+      {
+        "id": "131ccc87-9862-47a1-8701-e7a42f63ebc6",
+        "scheme": "Application",
+        "environment": "",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      }
+    ],
     "User.DeleteRestore.All": [
       {
         "id": "4bb440cd-2cf2-4f90-8004-aa2acd2537c5",
@@ -17557,6 +17583,24 @@
         "resourceAppId": ""
       }
     ],
+    "User.ReadUpdate.All": [
+      {
+        "id": "f0e73743-5699-4cb9-9ffe-d68e48294c63",
+        "scheme": "DelegatedWork",
+        "environment": "",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      },
+      {
+        "id": "c58d0ec5-14a8-4df9-a3dd-4d587fde18d0",
+        "scheme": "Application",
+        "environment": "",
+        "isHidden": true,
+        "isEnabled": true,
+        "resourceAppId": "00000002-0000-0000-c000-000000000000"
+      }
+    ],
     "UserActivity.ReadWrite.CreatedByApp": [
       {
         "id": "47607519-5fb1-47d9-99c7-da4b48f369b1",